$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa File: c3e6db55-bfca-3e4b-817d-7472db3f9575.roa (raw, json) Hash identifier: BwQiR40tBIQWUWCbdxRR0tJKM/Dh3QJLcAGjl9YM8rs= Subject key identifier: 94:53:A1:CA:C8:73:2B:EA:16:67:57:ED:9A:54:5E:51:69:C9:F7:44 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F4328584F497571CA5D87C253DFC97200 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3800 IP address blocks: 2605:8900::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:71:ca:5d:87:c2:53:df:c9:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f370cb4-868e-45eb-a08b-6636bb4458b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:22:92:a6:02:b6:d9:0e:58:5f:7e:28:88: 26:30:43:39:58:da:f7:aa:4a:72:dc:6f:22:8e:fd: 8e:55:43:0c:a6:68:04:64:94:9b:a2:b1:db:c9:93: 55:1d:2c:2a:7a:e6:be:b6:5a:6c:79:76:74:a4:46: 49:d4:3f:95:c5:2a:1c:c1:70:c6:cf:64:3d:f0:b0: d2:38:ff:6e:c3:e9:65:0e:5a:c6:b5:4d:99:06:88: 3a:6b:7a:38:80:18:d1:4e:3f:a5:5f:6b:fc:42:e9: 40:9a:2f:4c:17:2e:b5:a2:a6:a2:a2:b9:0a:d0:7c: e9:d3:ae:31:d4:ea:ab:3c:43:97:84:45:64:90:17: 54:31:65:65:ec:d4:28:58:c6:a9:29:05:aa:c3:75: 38:1e:b1:51:be:17:7e:c3:05:e9:b2:0f:d3:23:4b: 63:7d:f7:f6:80:e0:82:6e:99:1c:80:3d:0a:ca:e0: 7c:b8:47:15:1d:38:81:d7:e1:b1:bf:33:1a:ac:73: c3:9e:52:9a:61:15:c9:e9:1c:54:50:41:04:ee:7d: 09:ce:e0:56:ec:fc:ae:33:c8:8e:0c:f4:70:67:b0: a3:39:ef:4c:0c:39:4c:bc:70:ac:81:b3:d8:a4:79: 71:42:ed:d1:c6:94:cb:0a:df:fb:0b:a9:ce:92:f6: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:53:A1:CA:C8:73:2B:EA:16:67:57:ED:9A:54:5E:51:69:C9:F7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv6: 2605:8900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ab:b6:84:7f:1e:b5:af:5d:81:4f:ef:f8:de:6e:51:13:91: ef:5b:e8:a3:f7:c9:2f:94:ab:0e:34:87:59:71:78:9d:b6:5b: 4d:5c:d9:98:d2:88:b7:f8:ec:7c:28:f2:33:0c:64:13:75:ab: 55:32:42:e7:ed:95:d3:58:22:50:67:bd:63:51:fe:bd:93:89: ea:5a:14:05:2f:28:1b:f2:d5:2d:74:63:5d:0e:d9:cd:21:7c: 1c:6c:7d:39:98:31:62:55:8b:cf:d4:40:1c:a7:fc:6b:2f:a9: fe:de:ba:7a:01:f8:42:e6:7c:4e:84:aa:c3:65:ab:bb:7f:7a: 3f:ff:6f:4c:d7:31:67:33:be:d1:fa:18:50:1f:10:ee:6a:5c: 55:34:6d:36:5f:40:c5:61:ee:5f:9b:ed:ec:41:78:df:7d:f0: 52:9c:81:d2:48:1c:88:9d:c9:c0:a1:61:40:90:59:d5:84:13: 47:d3:22:73:77:00:23:06:f6:d3:00:41:8d:8a:9a:2e:f3:92: 5f:b6:5b:70:69:aa:a5:12:0a:40:81:ad:bb:09:61:6f:5f:6e: 51:71:99:1d:12:39:99:bb:63:f7:b1:52:7c:51:06:fb:50:42: 4f:45:35:f1:9a:a3:46:45:6e:0a:a4:7f:75:fa:fa:17:10:1d: b0:e1:4b:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdXHKXYfCU9/JcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2YzNzBjYjQtODY4ZS00NWViLWEwOGItNjYzNmJiNDQ1OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1IikqYCttkOWF9+KIgmMEM5WNr3qkpy3G8i jv2OVUMMpmgEZJSborHbyZNVHSwqeua+tlpseXZ0pEZJ1D+VxSocwXDGz2Q98LDS OP9uw+llDlrGtU2ZBog6a3o4gBjRTj+lX2v8QulAmi9MFy61oqaiorkK0Hzp064x 1OqrPEOXhEVkkBdUMWVl7NQoWMapKQWqw3U4HrFRvhd+wwXpsg/TI0tjfff2gOCC bpkcgD0KyuB8uEcVHTiB1+GxvzMarHPDnlKaYRXJ6RxUUEEE7n0JzuBW7PyuM8iO DPRwZ7CjOe9MDDlMvHCsgbPYpHlxQu3RxpTLCt/7C6nOkvaF/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJRTocrIcyvqFmdX7ZpUXlFpyfdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvYzNlNmRiNTUtYmZjYS0z ZTRiLTgxN2QtNzQ3MmRiM2Y5NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWq7aEfx61r12BT+/43m5RE5HvW+ij98kvlKsONIdZcXidtltNXNmY 0oi3+Ox8KPIzDGQTdatVMkLn7ZXTWCJQZ71jUf69k4nqWhQFLygb8tUtdGNdDtnN IXwcbH05mDFiVYvP1EAcp/xrL6n+3rp6AfhC5nxOhKrDZau7f3o//29M1zFnM77R +hhQHxDualxVNG02X0DFYe5fm+3sQXjfffBSnIHSSByIncnAoWFAkFnVhBNH0yJz dwAjBvbTAEGNipou85JftltwaaqlEgpAga27CWFvX25RcZkdEjmZu2P3sVJ8UQb7 UEJPRTXxmqNGRW4KpH91+voXEB2w4Uvn -----END CERTIFICATE-----Generated at Sun Oct 11 22:28:00 2026 by rpki-client